<!DOCTYPE html>
<meta charset=utf-8>
<title>invalid formaction: userinfo-password-contains-pile-of-poo</title>
<input type=image alt="foo" formaction="http://foo:💩@example.com">
